Static task
static1
Behavioral task
behavioral1
Sample
d319167778ba40e399a4b23f69063182_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d319167778ba40e399a4b23f69063182_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d319167778ba40e399a4b23f69063182_JaffaCakes118
-
Size
113KB
-
MD5
d319167778ba40e399a4b23f69063182
-
SHA1
f07ae14ac3f97ff5dc610fef8a262770ec3c0935
-
SHA256
8061784be132d17760b0f189e7ce305c4f9a9840630dbd899c39b1dc7f8cf29a
-
SHA512
c608056e7a4612f5363418e6c1367eace6a1df318220d154fe4fe060f50d629eeafd4fc1ed3d58ea19f55a041e7ed8b0345c28c43d0010f402ab540583ba0594
-
SSDEEP
768:ZBbmNGI5oprHkzF1EeONflxdUPMP599ZrbLGs14x4kyI2qdCd/zeG7s3QR:ZJmN7SH61vO1ndUPMx99ZHLb4kIufiQR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d319167778ba40e399a4b23f69063182_JaffaCakes118
Files
-
d319167778ba40e399a4b23f69063182_JaffaCakes118.exe windows:1 windows x86 arch:x86
17d772a0b6c6fd5bfb204547ef35eda6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
InterlockedDecrement
CreateFileW
HeapReAlloc
Sleep
Sleep
HeapDestroy
WaitForSingleObject
GetLastError
MultiByteToWideChar
HeapDestroy
GetTickCount
VirtualFree
VirtualFree
CreateThread
ReadFile
lstrcmpiW
GetModuleFileNameA
WaitForSingleObject
InterlockedIncrement
VirtualFree
DeleteCriticalSection
ExitProcess
WideCharToMultiByte
SetFilePointer
Sections
.data Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE